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PATENT 



REMARKS/ARGUMENTS 

Prior to the entry of this Amendment, claims 1-49 were pending in this 
application. Claims 1-2, 5-18, 22-40, 42-45, and 47-49 have been amended herein. No claims 
have been added and claims 19-21, 41, and 46 have been canceled. Therefore, claims 1-18, 22- 
40, 42-45, and 47-49 remain pending in this application. Applicants request entry of the 
amendments and reconsideration of these claims, as amended, for at least the reasons presented 
below. 

35 U.S.C. § 102 Rejections : 

Claims 1-49 were previously rejected under 35 U.S.C. § 102 (e) as being 
unpatentable over Stolfo et al., U.S. Patent Application No. 2004/000293 (hereinafter "Stolfo"). 
The Applicant respectfully submits the following arguments pointing out significant differences 
between claims 1-18, 22-40, 42-45, and 47-49 submitted by the Applicant and Stolfo. 

As discussed previously, Stolfo is directed to "transactions over a 
communications network between first and second parties . . . while securing private and 
personal information specific to the first party or the network device used by the first party with 
respect to the second party." (page 1, para. 1, lines 1-7) Under Stolfo, communications and/or 
transactions can be carried out between a user or first party, typically a consumer, and a second 
party, typically a merchant, over a communication network in which information is provided 
and/or a good is ordered while securing such information of the first party with respect to at least 
the second party, (page 4, para. 43) "A user or first party may communicate over the network 
with a second party, using a proxy that anonymizing (i.e., making anonymous) the first party 
with regard to the second party." (page 4, para. 47, lines 10-11) In other words, the proxy of 
Stolfo acts as a middleman that hides the identity of the first party from the second party by 
filtering private information sent by the first party, (page 16, para. 184 and para. 187) 
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Claim 1, upon which claims 2-18, 22, and 23 depend, is directed to a method for 
allowing proxies in an Identity System. Claim 24, upon which claims 25-31 depend is directed 
to a processor storage device having code for programming a processor to perform a method. 
Claim 32, upon which claims 33-39 depend, is directed to an apparatus that allows for proxies in 
an Identity System. Claims 1, 24, and 32 each recite in part "receiving from a user of the 
integrated Identity System and Access System a request for the user to be a proxy for an 
administrator of the integrated Identity System and Access System; associating said user with 
one or more credentials of said administrator without authenticating said user as said 
administrator; allowing said user to use said Identity System as said administrator based on said 
one or more credentials of said administrator; and allowing said user to use said Access System 
to access resources based on one or more credentials of said user but not the one or more 
credentials of said administrator." Stolfo does not disclose associating a user of an integrated 
identity system and access system with one or more credentials of an administrator without 
authenticating the user as the administrator. Furthermore, Stolfo does not disclose allowing the 
user to use the Identity System as the administrator based on the one or more credentials of the 
administrator while allowing the user to use the Access System to access resources based on one 
or more credentials of the user but not the one or more credentials of the administrator. For at 
least these reasons, claims 1-18 and 22-39 are distinguishable from Stolfo and should be allowed. 

Claim 40, upon which claims 42-44 depend are directed to a method for allowing 
proxies in a system. Claim 45, upon which claims 47-49 depend, is directed to a processor 
storage device having code for programming a processor to perform a method. Both claim 40 
and 45 recite in part "receiving from an administrator of the integrated Identity System and ' 
Access System an indication that a user of the integrated Identity System and Access System can 
be a proxy for the administrator; receiving an indication from said user to become said proxy for 
said administrator; accessing an Identity System cookie for said user, wherein said Identity 
System cookie stores an identification of said user; storing an identification of said administrator 
in said Identity System cookie for said user; allowing said user to use said Identity System as 
said administrator based on said identification of said administrator in said Identity System 
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cookie for said user; and allowing said user to use said Access System to access resources based 
on an Access System cookie for the user, wherein the Access System cookie is separate from 
said Identification System cookie and the Access System cookie does not store an identification 
of said administrator." Stolfo does not disclose storing an identification of an administrator of an 
integrated Identity System and Access System in an Identity System cookie for a user. 
Furthermore, Stolfo does not disclose allowing the user to use the Identity System as the 
administrator based on the identification of the administrator in the Identity System cookie for 
the user while allowing the user to use the Access System to access resources based on an 
Access System cookie for the user, wherein the Access System cookie is separate from said 
Identification System cookie and the Access System cookie does not store an identification of 
said administrator. For at least these reasons, claims 40, 42-45, and 47-49 are distinguishable 
from Stolfo and should be allowed. 

CONCLUSION 

In view of the foregoing, Applicants believe all claims now pending in this 
Application are in condition for allowance and an action to that end is respectfully requested. 

If the Examiner believes a telephone conference would expedite prosecution of 
this application, please telephone the undersigned at 303-571-4000. 

Respectfully submitted, 




William J. Daley 
Reg. No. 52,471 
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